Thursday, February 27, 2014

We are pleased to announce OSG Software version 3.2.5. This is a high-
priority update to the OSG 3.2 release series.

In OSG 3.2, we dropped CE-Monitor in favor of osg-info-services, which
provides the same core functionality in a simpler package. But until
now, a default installation of osg-configure, osg-info-services, and gip
were not well integrated, and in some environments osg-configure even
failed to run. This release corrects the known issues with and improves
integration of the information services components.

Use this new release if (a) you tried OSG 3.2, but reverted to OSG 3.1
because of problems with these components, or (b) you are avoiding OSG
3.2 because you have heard that these components were not ready.

Wednesday, February 19, 2014

The GOC will upgrade the following services beginning Tuesday, February 25, 2014 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.

OSG Display
* Updating to osg-display-data-1.0.9-1 so that it calculates 12 month numbers similar to gratiaweb (SOFTWARE-1400)

All Services
* There will be OS updates; reboots will be required. Downtime should be minimal, and the usual high-availability mechanisms will be used to reduce service downtime even further and eliminate it in most cases. However, services may experience degraded performance, and the services without HA mechanisms (OIM and Twiki) will still experience brief downtimes.

WLCG glexec tests have uncovered an issue with the effective default size of HTCondor delegated proxies. Sites should be aware that if they allow HTCondor to delegate proxies, the delegated proxies will be 512-bit proxies, even if the original proxy was 1024-bits or greater.

The issue is an incompatibility with 512-bit proxies and OpenSSL versions >= 1.0.1. Glexec calls and SSL communication will fail.

As stated in the OSG release documentation, sites should disable delegation entirely by inserting the following line into their HTCondor configuration:

DELEGATE_JOB_GSI_CREDENTIALS = False

More information can be found at https://twiki.grid.iu.edu/bin/view/Documentation/Release3/InstallComputeElement#5_1_If_you_are_using_Condor

The following announcement from Tony Tiradani applies only to HTCondor sites:

WLCG glexec tests have uncovered an issue with the effective default size of HTCondor delegated proxies. Sites should be aware that if they allow HTCondor to delegate proxies, the delegated proxies will be 512-bit proxies, even if the original proxy was 1024-bits or greater.

The issue is an incompatibility with 512-bit proxies and OpenSSL versions >= 1.0.1. Glexec calls and SSL communication will fail.

Sites may disable delegation entirely by inserting the following line into their HTCondor configuration:

DELEGATE_JOB_GSI_CREDENTIALS = False

Alternatively, sites may specify to HTCondor the bit size to use for delegating proxies by inserting the following line into their HTCondor configuration:

GSI_DELEGATION_KEYBITS = 1024

The actual value may be increased. However, from the HTCondor manual, "Setting the value greater than 4096 is likely to cause long compute times."

Additionally, the default for GSI_DELEGATION_KEYBITS will be changed to 1024-bits in the upcoming HTCondor 8.0.6 release.

Monday, February 10, 2014

As a reminder, tomorrow, February 11th all newly issued certificates will be signed with the new SHA-2 hash algorithm. To be fully compliant in all packages OSG resources will need to be updated to OSG 3.1.22 or greater. Release 3.1.22 has been available since August, 2013. A full table of packages and the OSG version they are compliant at is available at https://twiki.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if commonly used software at your site needs to be updated.

The OSG Production and Software Teams are available to answer your questions regarding the SHA-2 update. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.

Wednesday, February 5, 2014

The GOC will upgrade the following services beginning Tuesday, February 11th, 2014 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.

GratiaWeb v1.2-24
* Rebuilding with RHEL6 image (new version may require python2.6)
* Moved all external ‘URL’s into a single file location for easier update and tracking.
* Reworked WLCG Reporting (Overview) to contain all summary pledge and capacity information by Federation Name and Resource Group
* Reworked WLCG Reporting (Detailed) to contain detailed resources supplied information by Federation Name and Resource Group

Search This Blog

OSG Operations Team

Open Science Grid Operations Center

Based at Indiana University, the OSG Operations Group provides a single point of operational support for the Open Science Grid (OSG). Operations performs real time Grid monitoring and problem tracking, provides support to users, developers and systems administrators, maintains grid services, provides security incident response, and maintains information repositories.